JP2014500989A5

JP2014500989A5 -

Info

Publication number: JP2014500989A5
Application number: JP2013530435A
Authority: JP
Filing date: 2011-09-28
Publication date: 2014-12-04

Claims

A mobile device,
One or more communication modems, wherein at least one of the one or more communication modems is a wireless wide area network modem configured to connect the mobile device to a wireless wide area network A modem,
A memory configured to store a communication activity policy of the device;
One or more secure data path processing agents,
Run in a secure execution environment
Monitoring communication activity through the wireless wide area network modem;
Generating a device data record containing information about the communication activity through the wireless wide area network modem; and
Sending the device data record to the network element via a reliable communication link between the one or more secure data path processing agents and a network element;
One or more secure data path processing agents configured as follows:
A reliable data path between the one or more secure data path processing agents and the wireless wide area network modem;
A mobile device characterized by comprising:

The mobile device according to claim 1, wherein the information about the communication activity through the wireless wide area network modem indicates whether the mobile device is appropriately implementing the communication activity policy of the device. , Mobile devices.

The mobile device according to claim 1 or 2, wherein the reliable communication link comprises a secure message receipt feedback loop.

4. The mobile device of claim 3, wherein the one or more secure data path processing agents are further based on information from the secure message reception feedback loop, or the one or more secure data path processing agents. A mobile device configured to restrict data transmission or data reception of the mobile device through another modem in a communication modem.

5. The mobile device of claim 4, wherein the wireless wide area network modem or another modem in the one or more communication modems has error handling in the mobile device if a secure message receipt feedback loop error condition exists. A mobile device characterized in that an instruction is obtained.

6. A mobile device according to any one of claims 1 to 5, further comprising means for obtaining a communication activity policy of the device from the network element.

7. The mobile device according to claim 1, wherein the information about the communication activity includes a record of the communication activity through the wireless wide area network modem.

The mobile device according to any one of claims 1 to 7, wherein the communication activity policy of the device includes a policy for monitoring an application.

The mobile device according to any one of claims 1 to 7, wherein the communication activity policy of the device comprises a policy for monitoring access to a network destination, address or resource.

10. The mobile device according to any one of claims 1 to 9, wherein the secure execution environment is (a) controlled by an application processor, (b) controlled by a modem processor, or (c) on a SIM card. A mobile device, characterized in that

10. The mobile device according to claim 1, wherein the secure execution environment and the one or more secure data path processing agents are in a secure execution partition controlled by an operating system or secure partition software. A mobile device, characterized in that it is arranged.

12. The mobile device according to any one of claims 1 to 11, wherein the wireless wide area network is a cellular data network, and the information about the communication activity includes a record of service usage via the cellular data network; Mobile device characterized by.

13. The mobile device according to any one of claims 1 to 12, wherein the wireless wide area network is a cellular data network, and the communication activity policy of the device includes a policy for controlling access to the cellular data network. A mobile device characterized by

The mobile device according to claim 13.
The policy is
One or more control policies that control one or more applications running or operable on the mobile device; or
One or more control policies that control access to one or more network destinations, addresses, or resources accessible to the mobile device via the cellular data network;
A mobile device, comprising:

The mobile device according to claim 13, wherein the policy includes a control policy for controlling communication over a roaming network.

16. The mobile device according to any one of claims 1 to 15, wherein the wireless wide area network is a cellular data network, and the communication activity policy of the device includes an accounting policy for use of the cellular data network. Feature mobile device.

The mobile device according to claim 16, wherein
The policy is
Accounting policy for use of the cellular data network,
An accounting policy for one or more applications running on the mobile device, or
An accounting policy for use of the cellular data network with respect to one or more network destinations, addresses or resources available to the mobile device via the cellular data network;
A mobile device, comprising one or more accounting policies.

The mobile device according to claim 16, wherein the policy includes an accounting policy for roaming network usage accounting.

The mobile device according to claim 18.
The accounting policy is
The mobile device is
A request for approval or payment indication of access network service costs associated with the roaming network from a device user;
Restricting access to the roaming network by the mobile device if the device user does not provide an approval or payment indication of the service cost;
Helping mobile devices to do
Mobile device characterized by.

One or more notification agents, wherein the mobile device according to any one of claims 1-19 is further configured to provide information related to the data record of the device to a user of the mobile device. A mobile device, characterized by comprising:

21. The mobile device according to any one of claims 1 to 20, wherein at least a part of the one or more secure data path processing agents is stored in an independent partition of a non-volatile memory, the one or more A mobile device further comprising one or more functions configured to provide assurance or certification of at least a portion of the secure data path processing agent.

21. A mobile device according to any one of the preceding claims, wherein at least a part of the one or more secure data path processing agents is based on a signature, one or more keys, a certificate or a hash. A mobile device characterized in that it further comprises one or more functions configured to prove.

The mobile device according to claim 22, wherein
The one or more functions are
Downloading at least a portion of the one or more secure data path processing agents;
Installation of at least a portion of the one or more secure data path processing agents, or
Loading at least a portion of the one or more secure data path processing agents;
A mobile device configured to verify at least a portion of the one or more secure data path processing agents.

24. A mobile device according to any one of the preceding claims.
The one or more secure data path processing agents further comprises:
Monitoring communications sent by the network element over the reliable communications link; and
The communication from the network element transmitted over the reliable communication link within a particular event interval after transmitting the device data record to the network element over the reliable communication link Restricting access to the wireless wide area network modem or one or more other communication modems when the one or more secure data path processing agents have not detected a secure message receipt.
A mobile device, characterized by being configured as follows.

25. The mobile device according to claim 24, wherein the specific event interval includes time, the number of records transmitted, or the number of communications with the network element.

A mobile device,
One or more communication modems, wherein at least one of the one or more communication modems is a wireless wide area network modem configured to connect the mobile device to a wireless wide area network When,
A memory configured to store a communication activity policy of the device;
A SIM card,
Run in a secure execution environment
Monitoring communication activity through the wireless wide area network modem; and
Taking action to support execution of the communication activity policy of the device based on the monitoring of the communication activity;
A SIM card comprising one or more secure data path processing agents configured to, and
A reliable data path between the one or more secure data path processing agents and the wireless wide area network modem;
A mobile device characterized by comprising:

A network system,
A memory configured to store a communication activity policy of the mobile device;
A policy validation processor,
Receiving device data records via a reliable communication link between the network system and a device data record generator on a mobile device, comprising:
The device data record includes information about the data communication activity of the mobile device, and the information determines whether or not the mobile device is operating according to the communication activity policy of the mobile device. In receiving, configured to assist the policy validation processor,
A determination based on at least a portion of the device data record, the determination whether the mobile device is operating or was operating in accordance with the mobile device communication activity policy;
Initiating an error handling operation when it is determined that the mobile device is not operating or not operating in accordance with the mobile device communication activity policy;
A policy validation processor configured to:
A network system characterized by comprising: